Wireless -wifi attack with -kali-parrot-debian-ubuntu
> If you want to perform a wireless network penetration test, you must first scan all valid wireless access points. Just in Kali Linux, Kismet, a wireless network sniffing tool, is provided. Use this tool to measure the surrounding wireless signals and see all available wireless access points. This section will introduce sniffing wireless networks using Kismet tools.
1) Start Kismet tool. The execution command is as follows:
root@kali:~# kismet
2) Terminal extension
> This interface is used to set whether to use the default color of the terminal. Because Kismet's default color is gray, some terminals may not be displayed. Use the default colors here, select Yes, the interface will display
3) The interface prompts that the Kismet tool is running as the root user. At this time, select OK, and the interface will shown
4) The interface prompts whether to start the Kismet service automatically. Select Yes, the interface will shown
5) This interface displays some information for setting up Kismet service. Use the default settings here and select Start, the interface will shown
6) This interface displays package resources that have not been defined. Whether to add them now. Select Yes here, the interface will shown
7) Specify the wireless network card interface and description information on this interface. In Intf, enter the wireless network card interface. If the wireless network card is already in listening mode, you can enter wlan0 or mon0. Other information may not be added. Then click the Add button
8) Select the Close Console Window button on this interface, and the interface will be displayed.
9) The information displayed on this interface is that it is sniffing the signals in the wireless network. When running for a certain period of time, stop modifying. Click the Kismet menu option on this interface and select the Quit command
10) After pressing the Quit command
11) Stop Kismet service
Click Kill on this interface to stop Kismet service and exit terminal mode. At this point, the terminal will display some log information
12) the KISMET IS SHUTTING DOWN section you will see that several log files are closed.
> These log files are stored in the / root / directory by default. In these log files, the time when the log was generated is shown. These times are very helpful when running Kismet many times or days.
How analyse packages by kismet ?
analyze the data captured above:
1) Change to the / root / directory and use the ls command to view the log file generated above. The execution command is as follows:
2) root@kali:~# ls Kismet-20140723-17-19-48-1.*
Kismet-20140723-17-19-48-1.alert Kismet-20140723-17-19-48-1.netxml
Kismet-20140723-17-19-48-1.gpsxml Kismet-20140723-17-19-48-1.pcapdump
Kismet-20140723-17-19-48-1.nettxt
3) From the output, you can see that there are five log files with different suffix names. All information generated by the Kismet tool is stored in these files. The following describes the formats of these files.
alert: This file includes all warning messages.
4) gpsxml: If a GPS source is used, the relevant GPS data is saved in this file.
5) nettxt: Includes all collected text output information.
6) netxml: Includes all data in XML format.
7) pcapdump: Includes packets captured throughout the session.
The following mainly introduces the tools of PCAP and Text files.
Analyze the PCAP signal frame using Wireshark-root android require external wifi adapter >
1) Start Wireshark. The execution command is as follows:
root@kali:~# wireshark &
2) Open the pcapdump file. Select the File | Open command in the menu bar of the Wireshark interface
Selecting the captured pcapdump file
3) Select the pcapdump file captured by the Kismet tool on this interface, and then click the "Open" button
> pcapdump file data packet1
4) From this interface, you can see all wireless network data packets scanned by Kismet. The Beacon package is a basic management package for wireless devices and is used to signal other services.
Analyze Kismet's Text File
1) In Linux, you can use various text editors to open the nettxt file, or use the cat command to view the file contents. Open the nettxt file using Linux's default text editor
2) nettxt file content
> From this interface, you can see that there is a lot of information in the nettxt file, which lists each wireless network scanned.
> >Each wireless network has a label and lists each client connected to these wireless networks
3) Client Information
From this interface, you can see a Client1 whose MAC address is 00: c1: 40: 76: 05: 6c. It indicates that a client with a MAC address of 00: c1: 40: 76: 05: 6c is connected to a wireless access point- examp[le
Comments
Post a Comment